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L3 : Entry 1 of 11 
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INVENTOR- INFORMATION : 
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US -CL- CURRENT: 709/238; 370/235, 370/236, 709/237, 709/242 
ABSTRACT : 

In embodiments of the invention, a method and apparatus for dynamic proxy insertion 
in network traffic path is described. According to one or more embodiments of the 
invention, a request and/or response message may be modified to include one or more 
thru-proxy tags to identify a network (or traffic) node (e.g., a proxy, server, or 
intermediary) . For example, a request directed to a server or a response directed 
to a client may be altered to insert a plurality of intermediate or final 
destination designations. In so doing, a path of a request or response may be 
altered dynamically. A thru-proxy tag in a response may be inserted in a related 
request to identify a destination or node such that the request is sent to the 
destination in the thru-proxy tag before being sent to an origin server. Thru-proxy 
tags may be used to identify multiple and/or alternate destinations. 
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Exemplary Claim Number: 1 
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DOCUMENT- IDENTIFIER: US 6671723 B2 

TITLE: Method and apparatus for scanning a web site in a distributed data 
processing system for problem determination 

DATE- ISSUED: December 30, 2003 

INVENTOR- INFORMATION : 
NAME 

Nguyen; Andrew Quoc Anh 
Turek; John Joseph Edward 
Shtalhaim; Menachem 

US -CL- CURRENT: 709/224; 370/242 



ABSTRACT: 

A method and apparatus for identifying problems associated with a web site. A scan 
of a web site is initiated by a plurality of agents, wherein each of the plurality 
of agents are at a different location in the distributed data processing system. 
Results of the scan are obtained from the plurality of agents. The results of the 
scan are analyzed to determine if a problem is associated with the web site. 
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Exemplary Claim Number: 1 
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A method and apparatus for identifying problems associated with' a web site. A scan 
of a web site is initiated by a plurality of agents, wherein each of the plurality 
of agents are at a different location in the distributed data processing system. 
Results of the scan are obtained from the plurality of agents. The results of the 
scan are analyzed to determine if a problem is associated with the web site. 

35 Claims, 11 Drawing figures 
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Number of Drawing Sheets: 4 
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NAME CITY STATE ZIP CODE COUNTRY 

Gupta; Amit Fremont CA 

Baehr; Geoffrey Menlo Park CA 

US -CL- CURRENT: 709/238; 370/235, 709/242 



In embodiments of the invention, a method and apparatus for dynamic proxy insertion 
in network traffic path is described. According to one or more embodiments of the 
invention, a request and/or response message may be modified to include one or more 
thru-proxy tags to identify a network (or traffic) node (e.g., a proxy, server, or 
intermediary) . For example, a request directed to a server or a response directed 
to a client may be altered to insert a plurality of intermediate or final 
destination designations. In so doing, a path of a request or response may be 
altered dynamically. A thru-proxy tag in a response may be inserted in a related 
request to identify a destination or node such that the request is sent to the 
destination in the thru-proxy tag before being sent to an origin server. Thru-proxy 
tags may be used to identify multiple and/or alternate destinations. 
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□ 5. Document ID: US 6118768 A 
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TITLE: Apparatus and methods for use therein for an ISDN LAN modem utilizing 
browser-based configuration with adaptation of network parameters 
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Bhatia; Rajiv 
Zhang; Siuling C. 



CITY 

Marlboro 
Stony Brook 



STATE 

NJ 

NY 
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US -CL- CURRENT: 370/254; 370/469, 709/222, 709/250 
ABSTRACT : 

Apparatus, and accompanying methods for use therein, for an ISDN LAN modem that is 
suited for small user environments and which contains an internal ISDN router 
having a self-contained network hub for inter-connecting multiple network devices, 
such as workstations, to each other through a local area network (LAN) and for 
permitting each of those devices to each gain access through the router to any one 
of a number of different remote networks. Advantageously, to facilitate and 
simplify its configuration, the LAN modem automatically adapts itself to a current 
network environment of a workstation connected thereto, via the LAN, and then 
communicates with that workstation through a browser executing thereat to obtain 
configuration information from a user situated at the workstation. 
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Bhatia; Rajiv 
Zhang; Siuling C. 



Marlboro 



Stony Brook 



NJ 



NY 



US -CL- CURRENT: 370/352; 370/401 
ABSTRACT : 

Apparatus, and accompanying methods for use therein, for an ISDN LAN modem (300) 
(and various aspects thereof) that is particularly, though not exclusively, suited 
for small user environments and which contains an internal ISDN router (305) having 
a self-contained network hub (340) for inter-connecting multiple network devices, 
such as workstations (10) , to each other through a local area network (LAN) and for 
permitting each of those devices to each gain access through the router to any one 
of a number of different remote networks. Advantageously, to facilitate and 
simplify its configuration, the LAN modem automatically adapts itself to a current 
network environment of a workstation connected thereto, via the LAN, and then 
communicates with that workstation through a browser executing thereat to obtain 
configuration information from a user situated at the workstation. Additionally, 
the LAN modem, through use of a multi -tiered routing hierarchy including both 
destination- and source-based routing, accommodates several modalities of network 
communication not heretofore possible in a conventional router. Specifically, 
several different workstations can simultaneously communicate through the LAN modem 
with a common remote network (60) and share a single user account at a 
corresponding network service provider. 
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Apparatus, and accompanying methods for use therein, for an ISDN LAN modem that is 
suited for small user environments and which contains an internal ISDN router 
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several different workstations can simultaneously communicate through the LAN modem 
with a common remote network (60) and share a single user account at a 
corresponding network service provider. Also, the LAN modem can simultaneously 
route packet traffic between multiple workstations on the LAN and different remote 
networks (60, 70) through different ISDN connections simultaneously existing 
between the LAN modem and corresponding network service providers. 

25 Claims, 50 Drawing figures 
Exemplary Claim Number: 1 
Number of Drawing Sheets: 41 
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TITLE: Apparatus and methods for use therein for an ISDN LAN modem that provides 
enhanced network activity 

DATE- ISSUED: February 22, 2000 



INVENTOR- INFORMATION : 
NAME 

Bhatia; Rajiv 
Douglas; C. Paul 
Zhang; Siuling C. 



CITY 

Marlboro 
Mat a wan 
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STATE ZIP CODE 

NJ 

NJ 
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COUNTRY 



US -CL- CURRENT: 709/244; 709/217, 709/248 



ABSTRACT : 



Apparatus, and accompanying methods for use therein, for an ISDN LAN modem that is 
suited for small user environments and which contains an internal ISDN router 
having a self-contained network hub for inter-connecting multiple network devices, 
such as workstations, to each other through a local area network (LAN) and for 
permitting each of those devices to each gain access through the router to any one 
of a number of different remote networks. Through use of a multi-tiered routing 
hierarchy including both destination- and source-based routing, the LAN modem 
accommodates several modalities of network communication not heretofore possible in 
a conventional router. Specifically, several different workstations can 
simultaneously communicate through the LAN modem with a common remote network and 
share a single user account at a corresponding network service provider. Also, the 
LAN modem can simultaneously route packet traffic between multiple workstations on 
the LAN and different remote networks through different ISDN connections 
simultaneously existing between the LAN modem and corresponding network service 
providers . 
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□ 10. Document ID: US 6028848 A 

L3: Entry 10 of 11 File: USPT Feb 22, 2000 

US-PAT-NO: 6028848 

DOCUMENT- IDENTIFIER: US 6028848 A 

TITLE: Apparatus and methods for use therein for an ISDN LAN modem utilizing 
internal DNS and DHCP servers for transparent translation of local host names to IP 
addresses 



DATE -ISSUED: February 2 2 , 2 000 



INVENTOR- INFORMATION : 
NAME 

Bhatia; Rajiv 
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CITY 
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STATE 
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COUNTRY 



US -CL- CURRENT: 370/257; 370/401, 370/475 



ABSTRACT: 



Apparatus, and accompanying methods for use therein, for an ISDN LAN modem (300) 
(and various aspects thereof) that is particularly , though not exclusively, suited 
for small user environments and which contains an internal ISDN router (305) having 
a self-contained network hub (340) for inter-connecting multiple network devices, 
such as workstations (10) , to each other through a local area network (LAN) and for 
permitting each of those devices to each gain access through the router to any one 
of a number of different remote networks. Advantageously, to facilitate and 
simplify its configuration, the LAN modem automatically adapts itself to a current 
network environment of a workstation connected thereto, via the LAN, and then 
communicates with that workstation through a browser executing thereat to obtain 
configuration information from a user situated at the workstation. Additionally, 
the LAN modem, through use of a multi -tiered routing hierarchy including both 
destination- and source-based routing, accommodates several modalities of network 
communication not heretofore possible in a conventional router. Specifically, 
several different workstations can simultaneously communicate through the LAN modem 
with a common remote network (60) and share a single user account at a 
corresponding network service provider. 
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□ 11. Document ID: US 6023724 A 

L3: Entry 11 of 11 



File: USPT 



Feb 8, 2000 



US-PAT-NO: 6023724 

DOCUMENT- IDENTIFIER: US 6023724 A 

TITLE: Apparatus and methods for use therein for an ISDN LAN modem that displays 
fault information to local hosts through interception of host DNS request messages 

DATE- ISSUED: February 8, 2 000 



INVENTOR- INFORMATION : 
NAME 

Bhatia; Rajiv 
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COUNTRY 



US -CL- CURRENT: 709/218; 709/219, 709/224, 709/225, 709/237 
ABSTRACT : 

Apparatus, and accompanying methods for use therein, for an ISDN LAN modem that is 
suited for small user environments and which contains an internal ISDN router 
having a self-contained network hub for inter-connecting multiple network devices, 
such as workstations, to each other through a local area network and for permitting 
each of those devices to each gain access through the router to any one of a number 
of different remote networks. The LAN modem communicates network failure messages 
to a host workstation connected to the LAN by intercepting and responding to 
various DNS (domain name system) messages issued by that workstation and intended 
for a remote DNS server. Specifically, the LAN modem supplies its own network (IP) 
address in response to these messages, thus assuming a role of both a remote DNS 
server and a remote web server in order to implement a mechanism through which a 
fault-specific web page can be dynamically constructed and downloaded to the 
workstation for subsequent display, through a browser executing thereat. The page, 
once rendered, provides a specific message pertinent to the failure. 

20 Claims, 50 Drawing figures 
Exemplary Claim Number: 1 
Number of Drawing Sheets: 41 
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Sponsored Links 
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www.install4j.com 
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... optional, Describes the documentbase for the applet as a ... class attribute if the first jar 
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www.vamphq.com/jnlpquick.html - 29k - Cached - Similar pages 



JNLP Tag Reference 
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Installing Ptplot 

Ptplot is distributed in several formats. 

• The first format is the usual tar file and zip file format. 

• The second format is an experimental format using the Installshield JShield installer. 

Ptplot Installation under Unix or Windows with Cygwin from tar 
or zip files 

Ptplot is shipped with the java files precompiled, so you need not recompile. However, if you are using 
the standalone scripts such as ptplot, then you may want to go through the installation procedure so 
that the standalone scripts are properly localized. 

If you are using Windows and you want to rebuild Ptplot or localize the standalone scripts, then you will 
need to install the Cygwin toolkit from http : //sourceware . cygnus . com/ cygwin/ so that you can 
run /bin/sh and make. If you are running Windows and do not want to install the Cygwin toolkit, then 
see Using Pt plot under Windows without Cy gwin 

Below are the installation instructions for Unix and Windows with Cygwin. 

1 . Be sure that JDK1 .2 is installed, and that j avac is in your path. 

2. Untar or unzip the Ptplot distribution. 

3. Set the ptii environment variable to point to the top of the Ptplot tree. Under C-shell, one would 
do: 

setenv PTII ~/src/ptplot3 . 1 

4. cd into the ptii directory: 
cd $PTII 

5. Run configure 
. /configure 

6. Run make 
make 

7. View the applets by going starting your browser and going to: ptolemy/plot/doc/index.htm 

Installshield Installer 

Ptplot is also available in several self-extracting formats that were created with the Installshield JShield 
tool. 

Our use of this tool is still experimental. If you have problems, please try the tar or zip files. 
http://www.cs.bham.ac.uk/resources/ums/java/packages/ptplot3. 1/ptolemy/plot/doc/install.htm 3/21/05 
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Note that when you run the installer under Windows, Ptplot is added to your Start menu under Ptolemy - 
> Ptplot. 

Installshield limitations 

• When the Installer Applet is run under Windows, the Installer Window is not listed in the 
Windows Start Bar. 

• The File browser does not work very well. Installshield says that this is because we are using 
JDK1.2. The standalone applications require JDK1.2 so that they can use Swing. Note that the 
applets can still be run with JDK1 . 1 .x, so we don't require JDK1 .2. 

• Installing Ptplot in a directory whose pathname has a space in it seem to cause problems with the 
start up scripts. 

• If you choose the Microsoft jvm, which sometimes found at c : \winnt\ jview, then the format 
window will not come up. This is probably because the format window uses Swing facilities that 
are not in jview 

• Ideally, Ptplot should be installed on machines with JDK1 .2. It is best if you install Java before 
installing Ptplot. However The Installshield applet installer can download and install a JRE for 
you. Usually the JRE that can be downloaded via the Installshield applet installer is JDK1.1.7B. 
We were able to substitute in the JRE 1.2.2 .exe file so that under Windows, JRE1.2.2 is properly 
installed. However, we were not able to get this to work under Solaris, it appears that the JRE1.2.2 
installation hangs part way through the installation. As a result, JRE1.1.7B is the JRE that is 
optionally downloaded for Spares. 

• The InstallShield installer places the ptplot, histogram and pxgraph startup scripts in the 
toplevel ptplot3 . l directory rather than placing them in ptplot3 . l/bin 

Notes about building and installing 

How does configure work? 

configure is a /bin/sh script that determines some information about your environment and then 
modifies a few files. When the configure script is run, it reads in mk/ptu .mk. in and 
ptolemy/piot/ptplot . in generates mk/ptn.mk and ptolemy/plot/ptplot 

To get help with configure, try 
./configure --help 

configure reads in the . in files and substitutes strings inside the @ 
For example, configure reads in ptolemy/plot/ptplot . in and 

PTI I_DEFAULT=@PTI I_DE FAULT® 
PT JAVA_D I R=@PT JAVA_D IR@ 

becomes 

PTII_DEFAULT=/users/cxh/ptII 
PTJAVA_DIR=/usr/ javal . 1 

Using Ptplot under Windows without Cygwin 
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Below are the instructions for using Ptplot if you are under Windows and you do not have the Cygwin 
and have downloaded the tar or zip files. 

1. Set the ptii variable to the top-level directory of the Ptplot tree. 

C:\ptplot3.1> PTII=C:\ptplot3.1 

ptii is used by the standalone ptplot . bat script and other scripts 

2. Be sure that j ava is in your path by running j ava -version 

3. Added %PTii\bin to your PATH. 

4. Run ptplot. in 

Usually, it is not necessary to recompile the Ptplot classes, but below are the instructions for 
recompiling by hand under Windows without Cygwin. 

1 . To compile the Ptplot Java classes, they must be in the directory ptolemy\plot. 
C: \ptplot3 . 1> cd ptolemy\plot 

2. set your CLASSPATH to .A.. 

C : \ptplot3 . l\ptolemy\plot >set CLASSPATH= . . \ . . 
C : \ptplot3 . l\ptolemy\plot >echo %CLASSPATH% 
..\.. 

3. Remove the old Java files and compile them 

C:\ptplot3 . l\ptolemy\plot>del *.java *\*.java 
C:\ptplot3 . l\ptolemy\plot>javac * . java 

4. Runptplot.bat, which reads %ptii% 

C : \ptplot3 . l\ptolemy\plot >ptplot . bat 

Installing Ptplot as an applet 

Ptplot includes several jar files, which are collections of Java . class files 
plotapple t .jar 

.class files necessary for simple JDK1.1 browser applets - no pxgraph, no plotml 
pxgraphapplet . j ar 

.class files necessary for simple JDK1.1 browser applets with pxgraph classes, no plotml. Applets 
that use the pxgraphargs applet parameter should use this jar file, 
plotmlapplet . j ar 

.class files necessary for PlotML applets - includes com/microstar/xml and the plotml code, but 
does not include pxgraph, or PlotFrame. 
plot .jar 

The standard Ptolemy II jar file that includes the ptolemy/plot/*. class files and the class files in 
plotml and compat. Does not include com/microstar/xml or ptolemy/gui. plot . j ar is used by the 
Ptolemy II build system, 
plotapplication. jar 
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.class files necessary for standalone applications - includes com/microstar/xml, ptolemy/gui and 
the plotml code, but does not include pxgraph. If plotapplication. jar is present, then it is used 
by die standalone scripts (ptplot etc.) 

The best way to use Ptplot as an applet is to copy the appropriate *applet .jar file into the same 
directory as your applet, and then to use the archive applet directive. For examples of applet html code, 
see the demonstrations. 

Installing Ptplot as an application 

Under Unix and Windows with the Cygwin toolkit, ptplot can be run as three standalone applications: 

• ptplot - A modern plot application that with a menubar and such. 

• histogram - A histogram plot application 

• pxgraph - A plot application that is mostly backward compatible with the older XI 1 pxgraph 
program 

When configure is run, it substitutes variables inside ptplot . in and produced ptplot. The ptplot 
script is shared between the standalone applications, ptplot determines what name it was called with, 
and selects the appropriate class accordingly. 

If the ptplot script is run, then ptolemy .plot . PlotApplication is run 

If the ptplot script is copied to histogram, then ptolemy .plot .plotml .HistogramMLApplication is 

run 

If the ptplot script is copied to pxgraph, then ptolemy .plot .compat . PxgraphApplication is run 

Under Unix, you can use a hard link to create the histogram and pxgraph script: 

In ptplot histogram 
In ptplot pxgraph 

Under Windows, three .bat scripts are provided: ptplot .bat, histogram.bat and pxgraph.bat 
Last Updated: $Date: 1999/08/20 15:58:52 $ 
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Step by Step Instructions to download the files required for a local copy of JavaFoil 

• Check, whether you have already a Java virtual machine (VM) installed on your system. 

o Windows 98, 2000, XP: open a command window and execute the commands jview and 
wjview. Usually a Java VM can be installed during the installation or when upgrading the 
Microsoft Internet Explorer. 

o Unix: open a shell or xterm window and execute the commands java and appletviewer. 

• If these commands are found, your system probably has a working Java installation. If not, you 
will have to get the appropriate Java Runtime Environment (JRE) for your system from Suns web 
site http://java.sun.com/ . 
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• There seem to be problems with some older Java versions. You should have at least Java runtime 
version 1.1 installed. 

• Download this html file from 

http: //www.mh-aerotools .de/airf oils/if applet .htm 

• Download the JAR archive with the class tree from the following web address: 
http: //www.mh-aerotools .de/airf oils/ java/javaf oil .jar 

• Download the JAR archive with the utility package class tree from the following web address: 
http : / /www.mh-aerotools . de/airf oils/ j ava/mhclasses .jar 



This archive is also used by JavaProp - you have to download it only once. 

• Create a subdirectory "java" below the directory, where you have copied this html file and move 
the files javafoiljar and mhclasses.jar into this directory. 

• Now you have both files to run JavaFoil either as an applet or a standalone application. You can 
run the applet by loading this html page into your browser, by using the Java AppletViewer or by 
running it from the command line. 

[ More details can be found here ]. 

• To make life for Microsoft Windows users even easier, you can also download a Windows 
Installer file which contains all JavaFoil files and installs them correctly. 

http: //www.mh-aerotools .de/airf oils/ java/javaf oil ins taller .msi 



As the direct download does not work as expected on some systems (you receive a "view" of the 
the file on screen), you should use the context menu (right mouse button) of your browser to 
download the .msi file (Microsoft Installer). 

Then you can run the .msi file or use the context (right mouse button) menu to install. 
The Installer will install an html file to be used with your browser as well as a VBScript file (.vbs) 
which can be used to run JavaFoil without a browser by clicking onto the .vbs file. You can also 
de-install JavaFoil running the Installer again or by using the Software applet in the System 
Control program. 

The Microsoft Installer is not part of Windows 95 and 98 but can be downloaded from the 
Microsoft web site: 



• Redistributable v2.0 for Windows 95, Windows 98, and Windows ME: 
http://www.microsoft.com/downloads/release.asp? 
releaseid=3283 1 &area=top&ordinal=l 9 

• Redistributable v2.0 for Windows NT 4.0 and Windows 2000: 
http://www.microsoft.com/downloads/release.asp? 
releaseid=32832&area==top&ordinal=8 

• Windows 2000 and Windows XP: 

the Installer is included with the basic system. If not, you can probably 
also use the NT 4.0 version above. 
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Instructions if you have Java Web Start installed (Java 1.4) 

• If you want to install Java Web Start visit Suns web site at 
http://java.sun.com/products/javawebstart/ for availability of Java Web Start downloads. 

• Start the Java Web Start a p plication (German version shown): 



Java Web StuiL-AnwemlurKjxrncmtjyei SOD E3 




adress 




• Enter the address 
http://www.mh-aerotools.de/airfoils/java/ws/remoteapps.htm 

into the address field and press the RETURN or the TAB key to see all available applications. 

• The Web Start application will scan the address and show you all available applications. 

• When you start an application for the first time, you are asked whether you trust it and allow 
access to files, printer etc. If you grant access, you can run it like a normal application. 

• You can later work offline, because Java Web Start will cache the application files. 

• For Java 1.5 see http://www.mh-aerotools.de/airfoils/java/ws/ remoteapps.htm 
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The Applet is dead; long live the Applet! 

Michael-Franz Mannion 

Michael-Franz Mannion is CEO of the Swiss- based IT consulting firm, Cutting Edge GmbH. He can be 
contacted at micha ei-franz. mannion @ ubs. com . 

This article provides an overview and introduction to Java Web Start, an exciting new Java 
application distribution technology and reference implementation of the Java Network 
Launching Protocol (JNLP). 

I've heard it said that Sun never really intended applets to be positioned as a solution to automated 
application distribution, but more as a means to market the Java platform. To be fair, applets and Java 
technology did (even from the outset) address major portability and security issues by providing 
platform-independent byte-codes, byte-code verification, and sandboxing; but several critical issues 
remained unaddressed. 

Enter JNLP, aka JSR-56, a technology that aims to provide a complete solution to the problem of Java 
app distribution. 

Sun provides a free reference implementation of JNLP, called Web Start, which enables desktop PCs 
and workstations to download Java applications with little or no involvement from the end user. Of 
course, Web Start is just one possible implementation of JNLP. For example, a JNLP client written for a 
Sony Playstation is unlikely to implement JNLP in the same way as Web Start. 

Web Start Features 

Here's a summary of Web Start's features: 

• Fully automated, Web-centric distribution and installation of Java 2 applications, applets, and extensions based on the JNLP; 

• Resource caching — Application components are cached automatically on the client's machine; 

• Browser independence— Applications are executed outside of the browser process and can also be launched directly from 
the desktop; 

• JVM independence— A pre-requisite virtual machine implementation and version can be specified and, if not already present 
on the client machine, downloaded and installed automatically; 

• Transparent updating— Versions of cached application resources are checked against those hosted on the Web server. 
Newer versions are downloaded and installed automatically; 

• Incremental updates— Only new or modified classes and resources need be uploaded to the client's machine; and 

• Incremental downloads— If required, archives can be downloaded only when first required as opposed to being downloaded 
immediately. 

Let's make it clear that Web Start is not applets 2.0. It has nothing directly to do with the 
j ava . awt . applet API, although, as we shall see, the critical sandboxing features of applet 
technology have been retained and enhanced. 
Application Life Cycle Under Web Start 

Here's how an application makes it to a client's machine under Web Start: 

1 . Using a browser, the end user clicks on a JNLP file— an XML document describing the application— which causes the file to 
be downloaded to the client. 

2. Web Start is started (by the browser) and presented with the downloaded file. 

3. If the JNLP file describes an application's resources that are not already present on the client's machine, these resources will 
be downloaded using the specified URL information in the file. 

4. Once downloaded, the application is started (in its own process) using program parameters obtained from the JNLP file. 

The second time a JNLP file is referred to, the situation changes somewhat in Step 3: The 
Application Manager recognizes that the application is already present and compares the 
newly downloaded JNLP file with an old file. If it is established that a newer version of the 
application exists, the updated resource(s) will be downloaded accordingly. If not, no download 
takes place. 

The sequence in Figure 1 shows the logical interactions involved for a newly requested application. This 
application comprises a single resource called wsexampie. jar. Fortunately for the end user, the only 
thing to be done Is to click once on the hyperlink that points to the JNLP file. 
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Figure 1. Sequence diagram for an app download using Web Start. 
Installing Web Start 

There is a bootstrapping procedure associated with automated application distribution, and it begins 
with the installation of Web Start on the client machine. Installation requires the following steps: 

1 . Download Web Start for your chosen operating system from the JavaSoft Web site. (Version 1 .0.1 includes JRE 1 .3.) 

2. Run the installation program. The installation program adds the MIME type application/x- java- jnlp-f ile to the 
browser's MIME type database in association with the file extension jnip. Exit the browser if prompted to do so. 

To start the Application Manager under Windows, either double click on the newly installed 
icon on the desktop or double click on \ javaws . exe. Under Unix/Linux, go to the install 
directory and type . / javaws. The Application Manager window should now appear (see 
Figure 2). 
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Figure 2. Initial start-up of Web Start's Application Manager. 
Configuring and Testing Web Start 

That's pretty well it for the client installation, except that for those wishing to access applications 
hosted beyond a firewall, Web Start's proxy server settings will need to be specified. To do this: 

1 . Start the Application Manager. 

2. Go to File -> Preferences. 

3. Depending on how you usually specify proxy settings, either click on "use browser," or click on "manual" and enter the URL 
(omit the prefix "http : //" as it will not work) and port of the proxy server, which you can obtain from your network admin 
{see Figure 3). 
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Figure 3. Specifying Web Start's proxy settings. 

When using Web Start for the first time, as well as for debugging, it is worth selecting the console and 
logging options to "on," together with a filename for the log file. These options can be found under File 
-> Preferences -> Advanced (see Figure 4). 
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Figure 4. Specifying console/logging options. 

On the advanced tab, we can find another important feature: Clear Folder. This function Is used 
periodically to clear cached applications from the client's system. A consequence of its usage is that 
apps need to be downloaded once again. 

You can now verify if everything worked by trying out the demonstrations at the Web Start demo site. 
To run the demonstration, simply click on an app icon that downloads (via HTTP) the app's JNLP file. 
Web Start's Readme file provides some troubleshooting info should things not work as expected. 

Once downloaded, the now cached application can be re-launched from the Application Manager (see 
Figure 5). 
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Figure 5. Launching an application from the Application Manager. 
The JNLP File 

The JNLP file is an XML descriptor for the application, its resources, and its security requirements. 
Every JNLP application needs a JNLP file (see Listing 1 ). 

The top-level element of the JNLP file is called . The "codebase" attribute defines the base address of 
application resources, whereas the "href" attribute gives the location of the JNLP file itself. In general, 
for attributes that have URLs as values, it is possible to specify either a relative URL value (relative to 
"codebase," that is) or an absolute value. An absolute value will include the protocol prefix http://. 

Application Descriptor Elements 

The element of Listing 1 indicates that the JNLP file represents an app. The attribute "main-class" 
informs Web Start where the program's public static void main() method can be found, for 
example: 



starlet 
300 



Program arguments can also be specified by adding the sub-elements. These end up in the 
string array argument of the main ( ) method. 
Applets Descriptor Elements 

Applets can also be deployed with JNLP by providing an as opposed to an . The attributes of this 
element correspond to those we are used to providing in HTML using the applet tag, i.e., applet class 
name, document base, width, height, and parameters. 
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Extension Descriptor Elements 

Then there are the so-called "extension elements" and . A element describes a component 
extension that typically groups resources common to several apps; for example, frequently 
used GUI or back-end connectivity components. The primary benefit of this is that you can 
version and then deploy these common components independently of the applications. A 
component extension has no attributes or sub-elements and so can be written thus: 



Finally, an element describes a so-called installer extension, which is primarily used to install 
software elements that require a platform-dependent setup, such as a JRE or device driver. 
Like the application descriptor, the installer descriptor must also name the software's entry 
point by specifying a class with a main ( ) in it: 



Installers are run only once for any given client. Extension descriptors serve to modularize the 
various resources of a rollout. The complete description of two non-trivial applications could 
therefore be structured as in Figure 6. 




Figure 6. Application modularization with extensions. 



Resource Elements 

Using elements, we specify the jars, native libraries, pre-requisite JRE, properties packages, and 
extensions (component or installer) that make up the application. 

The resources element has some optional attributes, two of which are os and arch. By specifying this, 
we can state that a resource is designed for a particular operating system and architecture only, for 
example: 



This is obviously of particular significance to native libraries. The values presented correspond 
to the system properties os .name and os .arch, respectively. 
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Resources can be downloaded either immediately or on demand using the download attribute, with 
values "eager" or "lazy," respectively. The default here is "eager." This feature can be used to reduce 
start-up latency of an app. 



Finally, a resources element may refer to component or installer extensions. 



href ="libs/bc- reader- win. j nip" > 



The JNLP files referred to here are downloaded and processed in much the same way as the 
parent JNLP file. If the addressed extension is a component extension, then the extension's 
resources will be downloaded and will ultimately form part of the app's classpath. If it points 
to an installer extension, then the installer will be downloaded and executed. 
The Security Element 

The element of the JNLP file describes the permissions environment in which the application needs to 
operate. Omitting the security element altogether gives the application similar rights an unsigned 
applet has when downloaded by a browser: 

• All jar file resources named in the element of the JNLP file must originate from the same host; and 

• No native libraries can be used, i.e., no nativelib elements can be specified in the JNLP. 

In contrast to an applet, an unsigned JNLP application is permitted to exit the JVM (with 

System. exit ( ) ). 

For trusted applications, the current JNLP spec currently names two possible, mutually exclusive sub- 
elements of the security element, which look like this in the JNLP file: 



or 



The element refers to the permissions environment java. security . AllPermissions, 
which grants the app the same level of control over its execution environment as a regular 
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standalone application. The refers to a limited permissions environment that, among other 
things, allows socket connections to be opened to an arbitrary host and to load native libraries. 
For the full list of permissions for these variants, refer to the JNLP spec at JavaSoft's Web 
Start site. 

The following conditions must, however, be satisfied before a launched Web Start application is granted 
these permissions: 

1 . The application is signed; and 

2. The end user trusts the certificate used to sign the application. To this end, Web Start prompts the end user to accept or 
reject the certificate. 

The Information Element 

The JNLP file's element provides meta-information about the application. This information is 
typically shown to an end user during downloading or following downloading in the window of 
the application manager (see Figure 5). 



Cutting Edge GmbH 
Corporate Inventory 



One can also specify for the program to run offline by using the sub-element. In this example, 
however, this is not the case. 

Making Your Own JNLP-Enabled Applications 

Any Java program, including those that depend on native code, can potentially be deployed via JNLP. 
Here's what to do: 

1 . Ensure your application can access resources (icons, properties files, etc.) from a jar file (see "Accessing Program 
Resources" below). 

2. Package your application and other resources in one or more Java aARchive Gar) files. If the application requires privileged 
access to client resources, it will have to be signed. 

3. Write a JNLP file for the application by copying and then modifying an existing JNLP file, such as the one in Listing 1 . 

Accessing Program Resources 

One of the rules of packaging JNLP applications is that everything must be packaged in a jar 
file. This rule also applies to program elements such as icons and properties files, etc., 
which — before Web Start--one might have been tempted to obtain from the file system using 
FilelnputStream. 

To access these items from a jar, we must go via a class loader, as the following code excerpt 
demonstrates: 



ClassLoader cl = 

getClassO .getClassLoader ( ) ; 
Icon corporateLogo = new ImageIcon( 

cl .getResource ( "images/ logo.gif" ) ) ; 



This code assumes a jar structure as follows: 



com\mycorp\code\MainProg .class 
images\logo . gif 



This is a common but, thankfully, simple software modification that must be executed when 
making existing applications JNLP-enabled. 

Setting Up a JNLP Application Host 



No!-> 
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JNLP applications need to be hosted on an HTTP server. Fortunately, this is usually quite easy: 

1. Set up the Web server so it associates JNLP files with the MIME type application/x- java-jnlp-f ile. With Tomcat, 
for example, make a MIME mapping entry in the file Tomcat / con f /web . xml. 

2. Make the application's resources (jars, etc.) and JNLP file accessible via HTTP by placing them in the Web server's 
document path. The URL of the application specified in the JNLP file must obviously correspond to the jar's location. 

3. Provide a link from some Web page to the JNLP file. 

For the most basic behavior, these few steps are all that is required. Of course, with this basic 
setup, providing an application update implies producing a new jar and the client uploading — 
even if 90% of the application is unchanged. Fortunately, Web Start allows us to be much 
more economical with system resources than this. 
Supporting Incremental Updates 

Incremental updates permit a program's updated parts (its "deltas") to be shipped and installed, rather 
than the entire application. This can significantly increase updating speed, as well as reduce network 
traffic. 

Incremental updates come into play when an exact or, alternatively, a minimum version number is 
specified for a particular resource in the JNLP file, for example: 



When a JNLP client, such as Web Start, comes to request this resource from the HTTP server, 
it must encode the HTTP GET request according to the JNLP specification, which incorporates 
the version id of the requested resource. 



http : //www . cutt ingedge . ch/wsapps/ws example . j ar? 
version-id=l . l%2BQt-version-id=l . 0 

In this example, we see the JNLP client has also stated the current version id. This extra 
information can be used by the application host to ship a software delta. But to support this 
feature, the Web server needs to be equipped with a little intelligence and this is typically 
provided by a servlet. 

Version 1.0.1 provides the JnipDownioadServiet, which serves exactly this purpose. In fact, the 
JnipDownioadServiet does a lot more than deliver software updates. First, the servlet provides a 
convenient mechanism for deploying application resources from a Servlets 2.2 capable servlet 
container (e.g., Apache's Tomcat) by allowing the software to be packaged as a Web application 
archive or war file. Here's an example war file structure that corresponds to the JNLP in Listing 1 : 



/index. html 
/app/warehouse . jnlp 
/app/warehouse_Vl . 1 . j ar 
/app/images/logo.gif 
/ WEB - INF/ web . xml 
/WEB-INF/lib/jnlp-servlet . jar 
/WEB- INF/1 ib/ j axp . j ar 
/WEB- INF/lib/parser . j ar 

We see that the JnipDownioadServiet, as well as a JAXP-capable XML parser, are 
included in the war file. This and other details of setting up JNLP archives are explained in the 
guide that accompanies the developer's kit. 

The JnipDownioadServiet also automatically generates jar files that contain the software deltas on the 
fly by using the jardiff utility. This tool compares the previous version's jar with the newest version and 
creates a file representing the difference between them. The result, called a jar-diff file, is delivered to 
the client instead of an entire archive, whereupon the original jar is updated. 

Using the JnipDownioadServiet, there are two ways to specify the version numbers of resource 
archives. The simplest variation uses a special naming convention for the name of the archive. The war 
file structure above simply specified a version of VI. 1. However, the name can also include operating 
system, architecture, and locale. For example: 



/app/wsexample_Vl . l_OWindows_NT_Ax86_Len. jar 
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where 

V=Version 

0=Operating System 

A=Architecture 

L=Locale 



The operating system and architecture values here correspond to the attributes os and arch 
of the JNLP file's resource element. 

The second way to specify resource versions is to provide an XML document, version. xmi, that 
contains the required version information. Details of this are provided with the developer download. 
Whichever way you prefer will depend on your build procedures. 

Finally, you need to make sure your servlet container is correctly configured so JNLP client's URL 
requests are sent to the JnlpDownloadservlet. Your servlet container's documentation tells you how 
to do this. But be aware that not all of today's servlet containers fully support JNLP, so consult your 
vendor before investing too much time. 

Signing Applications 

Since Java 2, the standard JDK comes with two command line tools that are used to sign each resource 
that makes up the application: keytool and jarsigner. The keytool utility is designed to manage a 
database of key and certificate information called a keystore. The jarsigner tool is used to 
electronically sign to a jar. Both of these tools come with JDK 1.2 and higher. The JDK1.3 
documentation set comes with an improved user guide. 

For test purposes, a test keystore can be generated using the following keytool command: $ keytool 
-genkey -keystore testKeystore -alias mycerts. 

The command creates the keystore after you have entered some organizational information. To create 
a self-signed test certificate, use a command such as: $ keytool -self cert -alias mycerts - 
keystore testKeystore. 

Once the test certificate has been generated, an application resource jar is signed using the command: 
$ jarsigner -keystore testKeystore myComponent . jar mycerts. 

Of course, an application signed with a test certificate can hardly be called authenticated. "Credible" 
certificates are obtained from a reputable certification authority, either internally in some organizations, 
otherwise externally from a company such as VeriSign. 

Once a signed application is downloaded to the client, the end user is prompted to either accept or 
reject the certificate (see Figure 7). 



^Security Warning 



Java" Web Start 



This application is requesting unrestricted access to your local 
A machine and network 

Jlk 

Do you want to install and run: Web Start API Demo 
Signed and distributed by: Mike Marmion 

Warning: Failed to verify the authenticity of this certificate. No assertions can be 
made of the origin or validity of the code. 

It is highly recommended not to install and run this code. 



Start 



Exit 



Figure 7. Prompting the end user before a JNLP application is granted access to the local 
machine. 

The JNLP API 

The JNLP API provides a number of services that give controlled access to resources not normally 
available to unsigned J2SE applications. Here's a summary of the JNLP services provided with Web 
Start 1.0.1: 

• BasicService— Is similar to the Appietcontext provided with the applets API. For example, the ahowDocument ( ) 
method allows you to display the page for a given URL in the browser. 



http ://www. adtmag. com/j ava/article. asp?id=5 77 1 



3/21/05 



The Applet is dead; long live the Applet!- ADTmag.com 



Page 12 of 13 



• Clipboardservice— -Gives the application access to the system clipboard. It also makes It possible to perform cut-and- 
paste operations Involving other (non-Java) applications on the desktop. 

• DownloadService — Gives the application access to some of the functionality any JNLP client itself requires. With it you 
can invoke resource downloads and check to see if resources are already cached. 

• Fi leOpenService — Permits untrusted applications to open streams to files on the local disk. 

• FiieSaveServi.ee— Allows untrusted applications to save files to the local disk. 

• Print Service— Allows a local printer peripheral to be exploited. The functionality from the java .awt .print package is 
used to create the objects, which represent the printed medium. 

• PersistenceService — Provides cookie-like functionality for the application. Note that it is not a general persistence 
mechanism and the amount of name-value pair data expected to be stored on the client machine is small. Amusingly, the 
designers have chosen to dub the underlying mechanism "muffins." 

From a security perspective, several of these services could potentially give an application 
opportunity to reek havoc on a client machine. Fortunately, Web Start's implementation of 
these services includes checks with the Security Manager. So in cases where an application's 
requested permissions environment does not grant immediate access, the end user will be 
prompted to accept or reject the proposed operation (see Figure 8). 



|§| Security Advisory 



Java™ Web Start 



This application has requested write access to 
the system clipboard. The application might 
overwrite information stored on the clipboard. Do 
you want to allow this action? 

Do not show this advisory again 




No 



Yes 



Figure 8. Users decide if the app should be permitted access to a system resource. 
Conclusion 

Perhaps partly because applets failed to fully address many issues of application deployment, there has 
been a trend over the last couple of years to develop every conceivable kind of Web application using 
Java servlets and HTML-related technologies. (In fact, some IT managers are still suffering the effects 
of applet shellshock, and will, therefore, continue to push HTML as the only viable solution.) 

While this may still be justified for Internet applications, where the target audience is often unknown or 
application usage is infrequent, there now appears to be fewer reasons to continue with this style of 
application in intranet environments. This is especially the case when every end user has access to a 
standardized corporate desktop PC, which can include Web Start as part of the standard rollout. The 
CPU and memory resources of these boxes are simply begging to be used. 

With Web Start's imminent integration into JDK1.4, along with 1.4's other promised major 
improvements in the client programming area, we shouldn't be surprised to see a big revival in Swing- 
based client development. 

URLs ~ " ~ 



Web Start Download 

http://www.iavasoft.com/products/iavawebstart/ index.html 

Web Start Demo 

http://www.iavasoft.com/Droducts/iavawebstart/ demos.html 
Developer's Kit 



http://www.adtmag.com/java/article.asp?id=5771 



3/21/05 



The Applet is dead; long live the Applet!- ADTmag.com 



Page 13 of 13 



http://www.javasoft.com/products/javawebstart/ developers.html 
Verisign 

http://www.vQrisign.com 

JNLP Services Demo 

http://www.cuttinaedoe.ch 

Apache Software Foundation 

http://www.apache.org 
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Installation - Download - Bugs & Features - Release Notes 
Latest News 

• Jan 1 3, 1 999 JZipper support forum opened 

• Jan 1 , 1 999 JZipper version 1 .08 released, fixing issues with JDK 1 .2 

• Jan 1 , 1 999 JZipper Prerelase Jan 99 released 

O Fixed JDK 1 .2 issues 

O Fixed Adjust signatures feature 

O Fixed Beans identification problem 

O .. some other bugs .. 



• JZipper for JDK 1 .02 is discontinued 

• Nov 1 , 1 998 JZipper gets new owner, Vega Technologies Inc 
General description 

— JZipper is a certified 100% Pure Java application that eases the tasks associated with the publishing of 
Java Applets and Applications. JZipper allows the developer to specify the Java(TM) class files that are to be 
published and then it does the grunt work for you: zipping them together, optionally removing debug info 
and/or obfuscating symbolic names as it goes. The obfuscation feature makes it harder to de-compile your 
class files, protecting your work from the efforts of hackers trying to reverse engineer your code. Users can 
specify a main class and let JZipper include all dependant classes in the target ZIP or JAR file - dependant 
classes can be pulled right from other ZIP or JAR files! JZipper also converts ZIP files to JAR files effortlessly 
with the click of a mouse. Automatic removal of debug info eliminates the need for an extra release build and 
makes class files smaller reducing load time. JZipper provides both a convenient graphical interface and a 
handy command line feature enabling JZipper to be easily integrated with custom build procedures! 

Exciting Features 

• Specify a main class and let JZipper include all dependant classes in the target zip or jar file 

• Dependant classes can be pulled right from other ZIP or JAR files 

• Removes debug info from class files, eliminating the need for an extra release build 

• Can obfuscate class methods and class names on the fly 

• One can create config files which let JZipper to run on command line. This allows to integrate zip or 
jar file creation with build procedure 

Technical information 

—JZipper is written entirely in Java(TM) and the version for JDK 1.1 is certified 100% pure Java(TM). 
Consequently JZipper works on any platform where Java runs. It requires Java(TM) Development Kit (JDK) 
or Java(TM) Runtime Environment (JRE) installed. Both can be obtained from Sun Microsystems JavaSoft 
site. Depending on the version of JDK you have installed (1 .0.2 or 1 .1) there is a different version of JZipper 
for either JDK version. The 1 .1 version also supports JAR files, one can actually convert zip files to JAR files 
with the ease of the mouse click. JZipper provides convenient user interface to select all the desired options 
and it provides command line processing feature allowing easy integration with build procedures. JZipper 
screenshot can be viewed here . 

JZipper prerelease 

—We are adding more exciting features to JZipper, some of them are already implemented, here is a list of 
newly added features: 



• Automatic signing of the JAR file. This supports currently only JDK1 .1 , JDK1 .2 implementation is 
forthcoming 

• Cancel feature. Processing of all the classes can sometimes take a while, previously this couldn't be 
cancelled 

• Memory consumption indicators 

• Capability to specify multiple main classes 

• Capability to browse classes in the CLASS PATH 

• Automatic identification of Beans and inclusion of corresponding information into manifest file 

• Mocha Death feature added to the obfuscation implementation 

• Obfuscation enhancement: select between legal names and illegal names 
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• Obfuscation enhancement: define the prefix for the legal names 

• Obfuscation enhancement: native methods are automatically recognized and not obfuscated 

• Obfuscation enhancement: defined method names can be excluded from obfuscation. This feature 
allows wildcards, for example: one can define all the methods starting with get to be excluded from 



• Obfuscation enhancement: method signatures can be adjusted to the obfuscated names. This 
makes obfuscated classes compliant with JDK 1 .2 



—Would you like to see how the prerelease looks like? Click here for screenshot . 



•Are you interested in trying the prerelease? 



— Yes. I want to try out new prerelease - 
Usage Examples 

• You have just finished the development of an applet and intend to publish it. Since the applet 
involves multiple class files and also some classes from third party libraries you intend to publish it 
as a zip file. You fire up JZipper, browse to find the main class of your applet, usually the class 
which extends the java.applet.Applet, specify a target zip file name and press the Generate button. 
JZipper scans for all the dependencies of the specified main class and includes all the dependent 
classes in the target zip file. The dependent classes can be either individual class files or class files 
embedded in the zip file. Yes, indeed, JZipper can include classes right from other zip files. As an 
added bonus JZipper can obfuscate the classes, which makes decompilation useless. This way 
nobody can reuse your code without license 

• You have just finished a development of a Java class library. Now it is time to publish it and the 
preferred way is to have it published as a zip file. Again you fire up JZipper, select a directory 
(package) and/or class files, specify a target zip file and press Generate button. JZipper includes ail 

the selected class files and scans the selected directories for class files 



•JZipper retails for $35 and can be purchased by navigating to one of the sites below: 



—A fully functional free demo version can be downloaded here. Demo version will expire by the 15th of next 
month, by which time we hope you are ready to buy JZipper, however, you may always return to this site and 
download another demo version. 



obfuscation 



• Netsales 



»Yes, I would like to try the JZipper demo- 
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